CVE-2012-4190

freetype: memory corruption and application crash (reported against firefox on android)

Published Oct 12, 2012 CVSS 2.0 · 10.0 Critical EPSS 4.2% KEV · Not listed
Description
The FT2FontEntry::CreateFontEntry function in FreeType, as used in the Android build of Mozilla Firefox before 16.0.1 on CyanogenMod 10, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2012-4134 The FT2FontEntry::CreateFontEntry function in FreeType, as used in the Android build of Mozilla Firefox before 16.0.1 on CyanogenMod 10, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 8:28 PM
Reserved
Aug 8, 2012, 12:00 AM
Status
Modified
Published
Oct 12, 2012, 10:44 AM
Modified
Jun 16, 2026, 11:44 PM
Severity
Important
Public date
Oct 11, 2012, 12:00 AM